CVE-2013-4365

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 18-10-2013 01:55

Last modified: - 30-06-2022 05:18

Total changes: - 2

Description

Heap-based buffer overflow in the fcgid_header_bucket_read function in fcgid_bucket.c in the mod_fcgid module before 2.3.9 for the Apache HTTP Server allows remote attackers to have an unspecified impact via unknown vectors.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:P/I:P/A:P

Low

Attack complexity

Network

Attack vector

Low

Availability

Low

Confidentiality

Low

Integrity

Privileges required

Scope

User interaction

7.5

Base score

10.0

6.4

Exploitability score

Impact score

Verification logic

Reference

[dev] 20131008 [ANNOUNCE] mod_fcgid 2.3.9 released-Third Party Advisory
55197-Third Party Advisory
http://svn.apache.org/viewvc?view=revision&revision=1527362
DSA-2778-Third Party Advisory
openSUSE-SU-2013:1609-Mailing List, Third Party Advisory
SUSE-SU-2013:1667-Mailing List, Third Party Advisory
openSUSE-SU-2013:1664-Mailing List, Third Party Advisory
openSUSE-SU-2013:1613-Mailing List, Third Party Advisory
62939-Third Party Advisory, VDB Entry

Keywords

CVE-2013-4365

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2013-4365

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures